Shrinking the Attack Surface of Your Distributed Workforce