Identity-based vs. OS-specific EUC controls