With increasingly flexible remote-work options (for keeps or just for the holidays), security’s got to push left to keep pace