Paper-only access. All sessions are token-gated and re-verified on every request.