Hard lessons of the SolarWinds hack