Zero trust buyer’s guide: what to ask vendors before you sign