Building in security for open source projects, with Adrian Cockcroft (AWS)