click a gate (or press 1 / 2) — least privilege spent wins, not speed