You Can't Least-Privilege a Goal

Every access model we have built over the last thirty years rests on one assumption: the thing holding the credential has a job. A person has a role. A service account supports a defined workload. Tho