That's why only an idiot would give a single manager or administrator the keys to full rights. Security best practice is to divide fragments of the keys across

That's why only an idiot would give a single manager or administrator the keys to full rights. Security best practice is to divide fragments of the keys across multiple individuals so that no single individual can approve a potentially catastrophic action. Many organizations are still very weak in this area and will learn about best practices the hard way.