Private mode: requires authenticated sign-in and server-side access policies.