Critical Services in the Cloud: Understanding Security and Resilience Risks