Zero-trust security not an off-the-shelf product