Loading: 2 security tricks your cloud provider won’t tell you