I'd like to add a few (including gosec in particular) as we move
forwards, but I think it's best to start smaller.