'Never trust, always verify': every request is authenticated and authorized, wherever it comes from, inside the network or not.