A container build requires privileged mode for its chosen tooling, but unrelated builds use the same highly privileged project role. What should the DevOps engineer do?

1. Remove all build logs while leaving privilege unchanged.
2. Scope privileged build capabilities and role permissions to the projects that need them, and evaluate less-privileged build alternatives.
3. Keep the broad role but rename it readonly-build.
4. Enable privileged mode and administrator permissions on every project for consistency.