Currently, cannot set different permissions per subaccount. User granted permissions in one subaccount (ie. staging) also receives the permissions in another unintended account (ie. production).

This leaks access/privileges that were not intended for the user, creating risk of a security breach.