#least-privilege

Authenticated isn't authorized

“A device that proved who it is and can still touch everything isn't secure. It's one stolen cert away from being the whole problem.”