A break-glass account is excluded from conditional access, but the session lifetime policy still revokes it before the maintenance task finishes

The account bypasses the main gate, yet another identity control still constrains the operation.