Zero-Trust architecture principles for web