Pitfalls of a Zero-trust Security Model