https://www.advent-im.co.uk/mike-gillespie-security-think-tank-how-to-achieve-software-hygiene/