Hacker News Reader

I’d be super interested to see solutions to each, just to learn from.

You can deploy tooling (e.g. BeyondTrust / CyberArk for 1&2), but ultimately there's a conversation and a migration plan to be done for each.