Zero trust: Putting it all together with policy