Observatory controls.

Bearer credential stays in memory for this page only. Admin is disabled until a strong secret is configured.