Picture this: a production engineer opens a session into an internal Kubernetes cluster just to restart one pod. Minutes later, the same session still has full control, idle and forgotten. That small window can turn into a massive breach. This is why least privilege enforcement and granular compliance guardrails matter,