Traditional service accounts operate as static machine identities that frequently retain unrotated credentials and permanent standing privileges for years