An application handles highly sensitive secrets in memory shared with untrusted workloads. Which design principle is most relevant?

1. Rely only on network bandwidth limits
2. Use the same service account everywhere
3. Isolation with a defined protection boundary
4. Obscure the executable's filename