Access control isn't great if an engineer was able to transfer vaults to a personal plex server.