Which is not a principle of zero trust security?
use least privilege access
verify explicitly
assume breach
trust but verify