The Case for Extended Privileged Access Management