Zero trust moves the control pane closer to the defended asset and attempts to tightly direct access and privileges.