Funding OMB's zero trust mandate may be the toughest part of the new strategy