Mail infrastructure, under control.

The provider console is restricted to explicitly entitled Ciatto Account operators. Access tokens remain in a server-side encrypted session and are never exposed to browser JavaScript.