Restricted environment — authorisation required