Why startups must protect access to their cloud services from Day 1 (and how to do it in 3 easy steps)