Secure staff-only access