Use an admin account from the server's config file.
Protected by an IP allow-list and two-factor login.