Separating Protection and Management in Cloud Infrastructures