I should also add, another thing we do very wrong here - devs with admin access to production servers. Not only is there a vector for direct attack by compromis

I should also add, another thing we do very wrong here - devs with admin access to production servers. Not only is there a vector for direct attack by compromising a large number of accounts, but if devs can (and do) change settings on production machines without Infrastructure knowing about it, you've got potential for silently breaking secure systems.