Every plugin ships with source, docs, and a rollback set — reviewed against ServiceNow best practices.
Give the service desk recovery keys without giving them the Intune portal.