Loading: What your provider won’t tell you about cloud security