While comparing System Permissions between a Summer ’26 org and a Winter ’27 preview org, I noticed two system permissions that appear to be introduced in Winter ’27: 

1. Must Use Single Sign-On
2. Break-Glass Login Allowed

I haven’t been able to find either permission in the Winter ’27 release notes, Salesforce security documentation, or Metadata API coverage/reporting. Could you clarify what section/heading in the release notes documents the intended purpose of these permissions, and whether they are expected to be generally available as part of Winter ’27?