One doc tagged with "fail-securely"

Check every access request and break secure, not open