The console isn't written at this point to provide a proper GUI for a slave HC, nor for an admin-only HC, so don't provide it. In both cases the HC is incapable of handling writes to some things presented in the GUI (e.g. anything persisted to domain.xml.)

If necessary, just don't start the service that provides it for CR1 and switch to a useful error page or something for Final.

Slave HCs are still manageable via the admin-console, but the master HC provides the console and forwards the ops to the slave.