Security boundaries between cloud providers and customers