Allow host-level login/password for home/workgroup PCs while keeping global domain admins in Settings.
Add agent update settings, pending self-update via poll, desired config per host, and automatic or manual SSH/WinRM fallback when agents do not report agent.update events.