How to secure what you don’t control: the multi-cloud security challenge