A sign-in link is sent to your address. The session is tied to you, so access can be granted and revoked per person rather than by rotating one shared key.