https://foojay.io/today/how-to-use-java-dtos-to-stay-secure/