Security teams are paying for sprawl in more ways than one