How do you balance trade-offs between system performance and security requirements when building solutions for B&A?