principle of least privilege for AI