Anyone have experience with a permission model that needs to support both interactive users and service accounts? Do you use separate types or just one shared type? We are currently using one shared type because we want both to have a consistent access model. But I'm curious if folks have tried either variant and what your experiences (good and bad) have been?