Custom pools
Aggregate registered sources into your own pool, pick the verification suites that run against its output, and draw from it at /v1/entropy/custom/<name>. RCT/APT (SP 800-90B) health tests always run at ingest and cannot be disabled.
Operator sign-in
Pool definitions gate what the egress serves, so managing them needs an operator session (separate from the client API key in Settings).