ensures the principle of least access, featuring: Just-in-time JIT Password vaulting ephemeral accounts