i'd think you'd want some sort of controls/detection on infrastructure level machines.

above comment is very naive.