One control plane.Configuration stays on your nodes.
Private administration. Use a trusted HTTPS connection. Password recovery is available to the local operator.