1. A computer-implemented method comprising: receiving, by a tenant component of a multi-tenant computational environment, a request to access security context data by a tenant application of a tenant in the multi-tenant computational environment; unsealing a first protection layer of the security context data based on a determination that the tenant component is part of a trusted service of the multi-tenant computational environment; unsealing a second protection layer of the security context data based on a determination that the tenant application is authorized to access the security context data; and executing the tenant application in a context defined by the security context data based on the determination that the tenant application is authorized to access the security context data, wherein the executing of the tenant application further comprises launching a provisioned service account for the tenant application to execute operations associated with the security context data, and wherein the provisioned service account has restricted privilege as compared to an account of a tenant.