Putting the Sec in DevSecOps: Simplify Application Security