https://mikewest.github.io/spec-questionnaire/security-privacy/
https://people.mozilla.org/~fqueze2/slides/fosdem2015/#27.0