Privileged key that can upgrade or pause a protocol. Useful for safety, but adds centralization risk.