Identity is the First Step towards Zero Trust