Secure remote access for Alex-owned machines, with clear mode selection and visible relay cost tracking.