Zero Trust as a Service Starts with Controlling Privileged Access