and information security principles, such as “secure the weakest link,”
“promote privacy,” “hiding secrets is hard,” and “be reluctant to trust” (all cited
in Viega and McGraw’s Building Secure Software), and the numerous principles
related to handling of passwords, and to user authentication and access control