A data center administrator secures access ports on a Nexus 9000 switch connecting to a rack of physical servers. The requirement is that each port dynamically learns the connected server's MAC address, retains it across reboots by saving it to the running configuration, and — if an unauthorized MAC appears — the port must drop the offending traffic and increment a violation counter WITHOUT shutting the interface down or affecting the legitimate server. Which port security configuration meets all of these requirements?