security-by-the-book-pragmatic