Exactly what I was thinking… code reviews are a major component of many security requirements.