Set ADMIN_TOKEN in the environment to lock control APIs. Leave empty only for local/dev.
Pause rejects new socket connections; existing stay up. Resume accepts connections again. Restart / Stop disconnect everyone and exit the process (your host/PM2 may bring it back).