An application uses a service identity with database owner permissions for routine reads. What should be changed?

1. Store the owner password in another source file
2. Add a second unrestricted owner identity
3. Use a minimally privileged identity for the required operations
4. Rotate the owner password without changing its privileges