Least privilege

Give an AI system the smallest access it needs and nothing more.

The intern gets a key to the supply closet, not the vault.