Building in security without putting the brakes on application development