Staff sign-in

Password first, then your authenticator. Every prospect, every record, one sign-in. Clients use the other door. The kettle's on.