without navigating through P first, violating execution-path validity
and bypassing the security features.
could mention: alternate path, interaction points, accessibility.
Software Assurance Pocket Guide Series: