https://www.jerrygamblin.com/2014/08/22/applying-kindergarten-rules-to-security/