Allow for the recovery silo to be accessible only via technician port

The recovery silo is highly privileged with its ability to reconfigure authentication settings for all other silos on a rack, and so authentication security of all silos depends on the authentication security of the recovery silo. However, by current design that is limited to just username + password without an ability to add any kind of MFA. With a recovery silo being as accessible as all other silos, it essentially results in the authentication security of all silos being reduced to just username + password, which may be significantly less strong than what's provided by a SAML provider.

Adding MFA requirements to a recovery silo may be desirable by some customers, though it introduces similar kinds of lockout potential issues as configuring it for SAML authentication.

Alternatively, if a recovery silo could be configured to only be accessible via a technician port then customers could rely on physical security measures in their facilities to protect the recovery silo.

No files, tests, or entry points are identified. Start by tracing how recovery-silo authentication and technician-port access are represented, then clarify whether the intended outcome is MFA support, technician-port-only access, or both. Done should include an agreed design, access restrictions, and tests covering recovery-silo lockout and authorization behavior.