Privileged User Access Control for Sensitive Systems: Session Isolation