Picture this: your team just needs to check a production log. Someone opens a bastion, tails a file, and suddenly personally identifiable data flashes on their screen. A second later, that data is copied to Slack. The audit trail is a mess, compliance groans, and you wonder why session-based access