A tenant needs access recovery if ordinary administrators are locked out by a faulty authentication policy. Which design should it maintain?

1. Store emergency credentials in a public source repository
2. One unmonitored shared password used for routine work
3. Carefully protected and monitored emergency access accounts with tested procedures
4. Delete every privileged account except one dependent on the same failing policy