Provision a privileged console account.

Account creation follows the same guard as sign in: only the admin and superadmin login handles can proceed.