What does the principle of least privilege state ?