Zero standing privileges architecture decouples authentication credentials such as passwords and tokens from persistent system entitlements