Which workloads belong in the cloud, which stay local and which need a hybrid approach you can actually defend.