https://preview-developer.espressif.com/pr479/blog/introducing-esp-privilege-separation/