Bringing the Zero Trust Mindset to Data Protection