Here’s a fact most admins won’t say out loud: service accounts are often your weakest security link and you can’t just ‘rotate the password’ out of this problem.