@Niklas_L The whole point is that access to PII
must be limited to a time when it is absolutely necessary, and then revoked
immediately. If that's not possible (because of on-call rotation), all access to
production systems must go through Gateway that monitor all traffic
(keyloggers).