LLM access controls and monitoring: the attack path and the permission boundary that stops it