Which is not a principle of zero trust security?
assume breach
use least privilege access
verify explicitly
trust but verify