developer security hygiene