You’re the on-call engineer, 2 a.m., production’s acting weird. You jump into a Teleport session, hoping for insight, but you’re instantly exposed to way more data than you should see. One wrong command, and that late-night fix becomes an incident report. That’s why per-query authorization