What is the shared responsibility model in cloud security?