https://authnull.com/blog/posts/Mastering-the-art-of-safeguarding-privileged-users/