Users for AI should not be able to access others’ data, or become root.