Why should a deployment pipeline use a service principal rather than a shared personal token?

1. To provide controlled workload identity and permissions
2. To eliminate credential rotation requirements
3. To grant every deployment unlimited administration
4. To bypass Unity Catalog authorization