Command wall isolated

This route no longer publishes a private operator surface. Command access now starts from the signed-in homebase only.