https://blog.repithwin.com/demystifying-zero-trust-network-access-2-0/