Access sprawl—not onboarding or offboarding—is the biggest identity security risk. Here's how overprovisioned permissions ...