Cloud security fears subside, but there is still work to be done