properties exhibited by the component will seldom satisfy the security
requirements for all these possible combinations; the component may be
proved secure in one application in a particular operating environment,
but insecure when used in a different application and/or environment. For