Definition of done: consider security