A service account has permissions far beyond its backup task. Which principle should correct this?

1. Least privilege
2. Security through obscurity
3. Implicit trust
4. Maximum availability