The emulator holds no credential of its own, so log in as a real principal. What you
choose here decides which channels the socket can hold — the two role gates are disjoint,
so no one token holds both sides. The password or PIN is forwarded once to the API and
never stored, not here and not on the server. When the token expires this form comes back.