Rolling out zero trust security the right way