Zero-trust security means never trust, always verify. Here's what that means in practice, why it's replacing VPNs, and how organizations can actually implement it.