Cloud security strategies rest too heavily on blind trust