Don't Trust -- Verify: Zero Trust Security for Users and Devices