Okta’s chief security officer talks security by default and explains why he thinks time is running out for the shared responsibility model