Picture this. It’s 2 a.m., production is down, and an engineer is racing to debug a database. They open a session tool, attach to the instance, and moments later they realize they had write access when they shouldn’t have. Logs are noisy, data is exposed, and your