least privilege! though, attackers seem to always find a way through.