The 2 a.m. production outage always feels the same. Pager goes off, Slack fills with panic, and someone scrambles to open a bastion host. What happens next is a blur of SSH keys, terminal windows, and untracked commands. Minutes lost, context gone. This is why no broad SSH access