The debugger can be triggered from /console endpoint. Also, by default It requires PIN code which is unique and blocks user after 3/5 wrong attempt.