How to investigate service provider trust chains in the cloud