Implement role-aware HTTPS and SSH authentication

src/main.c

@@ -127,7 +127,7 @@ void app_main(void)
                  "HTTPS security material unavailable (%s); use UART0 'web reset --force' to replace it",
                  esp_err_to_name(web_security_error));
     } else {
-        ESP_LOGI(TAG, "Using %s HTTPS identity and administrative credential",
+        ESP_LOGI(TAG, "Using %s HTTPS identity and legacy recovery credential",
                  web_security_source == WEB_SECURITY_LOAD_STORED ? "stored" : "newly generated");
     }
 
@@ -151,7 +151,7 @@ void app_main(void)
     secure_wipe(&legacy_credentials, sizeof(legacy_credentials));
     secure_wipe(&legacy, sizeof(legacy));
     if (user_database_error != ESP_OK) {
-        ESP_LOGE(TAG, "User database unavailable: %s; current network authentication remains active",
+        ESP_LOGE(TAG, "User database unavailable: %s; HTTPS and SSH authentication will fail closed; use UART0 'user recover --force'",
                  esp_err_to_name(user_database_error));
     } else {
         ESP_LOGI(TAG, "Using %s user database",