Defining endpoint security in a zero-trust world