A scheduled maintenance job targets several databases. What security design should its execution identity follow?

1. Make every target anonymously writable
2. Use a shared Global Administrator password for every database task
3. Grant only the permissions required for its target operations and scopes
4. Store the credential in public job output