How do you communicate critical software defects to developers who may be defensive about their code?