---
flags:
  script-src-elem:
    unsafe-inline: true # nocheck: csp-unsafe  Reason: set when the role first deployed, with no console error recorded against it; TODO: re-verify against the running admin UI and drop the flag if the login gate renders without it
whitelist:
  font-src: []
  connect-src: []