Where are agencies in their zero trust journey and how has strategy evolved to meet new security demands?