Replace persistent access with Zero Standing Privileges

Summary from the TLDR InfoSec newsletter

Just-in-time, just-enough access, scoped to the task, and automatically revoked when work ends.