The Zero-Trust Paradox: Managing Identity and Devices