Explain the principles of least privilege, role-based access control (RBAC), and multi-factor authentication (MFA).