Anti-nuke protection: rate limits and role locks that stop a compromised admin from wrecking a server.
