Ask HN: How do you enforce least-privilege when an API token has full access?3 points·by ricberw·hace 4 meses·2 comments