MSC03-J: Never hard code sensitive information CWE-798 : Use of Hard-coded
Credentials
ENV03-CPP: Sanitize the environment when invoking external programs
SEC09-J: Do not base security checks on untrusted sources