Securing Developer Workspaces at Scale