Secure Application Development Without False Starts