FLUSH_DB permission too broad

On a Redis shared with other apps/users, the FLUSHDB is too dangerous to grant bc it flushes all keys for all users (namespaces). It’d be safer to use SCAN for the prefix, then UNLINK.