Text this: Developing and evaluating security-aware software systems