MIT-17 Run your code using the lowest privileges that are required to accomplish the necessary tasks [R.XX.A].
If possible, create isolated accounts with limited privileges that are only used for a single task. That
way, a successful attack will not immediately give the attacker access to the rest of the software or
its environment. For example, database applications rarely need to run as the database administrator,