A break-glass administrator account is required for emergencies. Which design best supports governance?

1. Permanent daily use by every developer.
2. An untested account with no owner or recovery process.
3. Strong protection, restricted availability, monitored use, and regular validation of the emergency procedure.
4. A shared password posted in a public document.