The Three Phases of Securing Privileged Accounts