No passwords — the link is the way in.
One for the customer to key their own arrivals, one for the warehouse phone, and
one per person at the desk. Per person matters: the documents record who
checked and who issued them, and a link that gets passed around makes that record
say nothing. Retiring a link cuts off exactly that one; everything keyed through
it stays.
A desk link can issue customs documents. Treat it like a key —
not in a group chat, not on a screenshot.