Register hosts under Containers/VMs/Docker with encrypted key storage, and require re-authentication for sensitive account changes.