"By default, machines should be given the least amount of access and power that they need to do their job."