Zero Trust: Getting the basics right