Which is not a principle of zero trust security?
trust but verify
use least privilege access
assume breach
verify explicitly