How MCP Servers Can Expose Enterprise Secrets