https://michaelgurley.org/index.php/2017/09/01/trust-but-verify/