Rethinking OT security: context-based exposure management for direct results