Cloud sovereignty is no longer just a public sector concern