Proving least privilege to someone who will not read a policy document