Somewhere in most large enterprises, a service account created for a project that ended two years ago still has write access to a production database. […]