Embedded mode: the full dashboard, a forked writer process, and two
SQLite databases the application owns, inside the app being monitored.
No token, no cloud, no Node in the host, no job worker.

HTTP Basic on the dashboard by default, closed until credentials exist,
the way Mission Control Jobs does it. Host user ids are opaque, so an
application with UUID users is a first-class host.