Least privilege

Giving each server and agent only the tools, data and credentials its job needs. Sam's sign-in, for example, reaches a server that can't refund at all.