We've already implemented separation of duties.

Those with legitimate access is where the real problem lies.