Designing least-privilege registry credentials for CI | Hacker News Reader