How do you implement the principle of least privilege in a multi-tenant cloud environment for Airbus Helicopters workloads?