Azure Functions vulnerability proves cloud users not always in control