Least privilege

A security principle of giving each user the least access they need. RAG Basics' per-café rule followed it but didn't scale beyond one file.