https://developer.espressif.com/blog/introducing-esp-privilege-separation/