Security Think Tank: Going beyond IAM for cloud security