Making least privilege the low-hanging fruit in clouds