Zero-trust is not a product – it’s a philosophy