Unspoken Security Episode 16: What’s the Purpose of Attack Surface Management?