Guardian sign-in for per-device settings.
Full control. Uses the accountability partner's Guardian PIN.