How to protect you Standard SAP Users

In every SAP Support environment I have ever participated, the question 'How to protect the Standard SAP users' (SAP*, DDIC and EARLYWATCH) always pops up.
This questions used to be a difficult one to answer but today's SAP Help pages are really helping you in this issue!