Cloud Access Feels Invisible Until It’s Audited