Ask HN: How do you enforce least-privilege when an API token has full access?3 points·by ricberw·há 4 meses·2 comments