Dealing with cloud security shortfalls