Building security in – the audit paradox | Hacker News Reader