Fundamental Security Design Principles