Next, shrink the blast radius. Separate critical workflow functions, and limit what standard admin accounts and endpoints can ...