> I was picturing a case where the CI was allowed privileged access to a resource to which developers were not allowed access at all. That's also possible. Ima

> I was picturing a case where the CI was allowed privileged access to a resource to which developers were not allowed access at all. That's also possible. Imagine a pipeline which carries out a deployment in an environment where normal devs are not allowed direct access to production machines / cluster (might happen in larger companies).