zero standing privilege

The goal that no account keeps admin rights all the time. Rights exist only during short just-in-time windows.

Where the book teaches it