easily protected, authorization credentials. This permits the software to
be examined by a number of reviewers without concern that the review
may itself compromise the software’s security. The practice of openly
exposing one’s design to scrutiny is not universally accepted. The