Protecting Data with the Principle of Least Privilege