Stupid security mistakes: Things you missed while doing the hard stuff