https://preview-developer.espressif.com/pr387/blog/introducing-esp-privilege-separation/