Picture a production engineer stepping into a live session on Teleport. They’re responding to an incident, juggling AWS credentials, Kubernetes contexts, and a dozen command windows. Everything works fine, until it doesn’t. A single elevated session token lingers too long, opening the door for unintended privilege escalation. This