I built a tool to answer "why does this user have access to X?" in AD | Heykuki News