How do we even begin implementing zero trust architecture effectively when our team has zero prior experience with it