It’s kind of terrifying to have and give out admin powers with no oversight (except maybe forensics if we’re lucky). I’m interested in what alternatives could look like. Maybe provisioning requests take multiple signatures, like turning missile keys?