Which is not a principle of zero trust security?
verify explicitly
trust but verify
assume breach
use least privilege access