Which is not a principle of zero trust security?
assume breach
use least privilege access
trust but verify
verify explicitly