Frameworks that provide security features significantly reduce -- although not eliminate -- application developer's burden