Zero trust is both a journey and an end state