Your admin key authenticates a pinned hybrid-KEM channel. The password, manager pages, settings, and release operations never travel as plaintext.