Zero trust isn’t broken. Most companies just do it wrong.