Which of the following is a fundamental principle of privileged session manager setup as it applies to CyberArk Defender Certification?