How might you compartmentalize admin access the whole way down the stack at the enterprise level? What if you were to start from scratch?