Access check

Deployment placeholder — no vault content is on this host.
If you can read this without signing in, access control is not wired yet.