blog post about A Big Look at Security in OpenAPI