Security Think Tank: Good documentation could save your bacon