Explain the principle of least privilege and how you would audit a system to ensure it is being enforced.