NEG control: a normal login with NO lure text → BDR must stay SILENT.