https://jerrygamblin.com/2017/06/11/reminder-operational-security-is-hard/