https://www.token.security/blog/secure-cross-account-access-is-tricky-four-common-dangerous-misconceptions