Gate password protects the Vercel app. Desktop access uses a separate short-lived JWT shared with Hetzner.