Security considerations for the developer