Basically AC providers put more effort for the AC's resiliency than protecting the CDN. Does this count as Kerchoff's principle?