Users can activate privileged roles without going through any step-up authentication. This means that once their credentials ...