Least Privilege for Tools and Data Access