Recovery and budget controls.

This surface requires the server-configured operator key. The key is sent only with this request and is not persisted by the interface.