How would you secure internal developers and external partners accessing shared systems and APIs at Vodafone?