The Tug-of-War for Cyber Resilience to Guard Water Utilities