FullPowers: recovering the default privilege set of a service account