Activate owner access

First-time credential setup is restricted to active owner emails already approved in the production organization.