“When a live database issue happens at night, engineers need fast access—but permanent admin access is a major security risk.”