I wouldn't worry too much about false positives. It's not that I'm worried, it's that it's a distraction. When the margin of error is high enough, it becomes l

I wouldn't worry too much about false positives. It's not that I'm worried, it's that it's a distraction. When the margin of error is high enough, it becomes less signal and more noise, which leads to either panic (spending all your time managing access credentials) or complacency (ignoring the indicators).