Worth Reading: Implementing security as a set of services