In your opinion, What would be the first security measure to consider regarding a developer's privileged access to the production environment?