11.2.3 零信任与SDP