this is all fine for regular employees, but it becomes a problem when an attacker gained access to a system