What the identity attack surface looks like when trust becomes the target