Mitigating Nation-State Attacks on Cloud Services