Network segmentation projects fail in predictable patterns