Self-service is not a convenience feature with a security cost. It is a decision about who holds authority.