DevOps-centric security