Even with 120 privileged accounts locked down and a strict 7-day max temp...

https://sierra-wiki.win/index.php/How_to_Enforce_Automatic_Expiry_for_Service_Tokens_with_a_Small_In-House_Service

Even with 120 privileged accounts locked down and a strict 7-day max temp access rule, security tools can still fall short. Without proper governance, quick detection won’t save you if oversight is missing