Making connections between OO and security principles