Now I need to know the other hidden features... 
Attached is a far-from-complete list of TSP interface functions and constants—including debugging and system-level ones hidden behind Lua metatables.
Examples:
1. Entering calibration mode using the admin password if the user password has been forgotten:
cal.unlocknorecall("ADMCAL75MM")2. Dumping calibration constants:
print(ki.cal.getdata())3. Remotely disconnecting/connecting multimeter inputs:
ki.dmm.connect = 0
ki.dmm.connect = 14. Dumping NVRAM:
print(ki.sysinfo.nvmemdump())5. Changing the interface language without rebooting:
ki.sysinfo.lang = "SCPI"
TSP$ki.sysinfo.lang = "TSP"The TSP$ prefix allows the following command string to be executed in TSP mode, regardless of the currently selected system interface language.
6. Executing SCPI commands in TSP mode:
TSP$scpi.execute('TRIGger:CONTinuous REST')7. Determining fan speed:
print(ki.fan.getfantach())8. Setting a specific fan speed (0–100%):
ki.fan.dutycycle = 409. Forcing the device into local mode:
ki.tsplink.golocal()10. Rebooting the device:
TSP$ki.reboot()11. Retrieving the error description for a specific code (example: 0x1642):
print(ki.eventlog.geteventinfo( 0x1642 ))