Foundational Security for a Cloud-First World