The Cloud Security Habit Teams Assume Is Already Covered