Who Protects What? Shared Security in GKE (Cloud Next '19)