Add a new unprivileged database user (fxa) and use it for the server

Unless you try to do this at the same level as adding the user account, e.g. finding all stored procedures and ensuring that they have execute on each one.  That could get ugly fast though.