Rethinking security for cloud workloads