The principle of least privilege