Darren's coworker: "I understood your point about minimum privileges. So, now service user need be in only one group: Administrators."