Overpermissioned service accounts, wildcard permissions, and default account usage are among the most common findings in cluster assessments.