Security First: Implementing Trust by Design