Reducing the Enterprise Attack Surface with Cloud-Friendly App Segmentation