Cloud Security from the Trenches