Principles of least privilege and separation of duties