Picture this. It’s Friday, 4:58 p.m., and your data engineer runs one last query against production. He’s authenticated through Teleport, sits in an approved session, but that query touches sensitive customer data. Nothing breaks, but data exposure just happened quietly inside a valid session. You realize