Mitigating risk with application isolation and cryptographic segmentation