How do you handle a situation where a software developer resists implementing a security control because it slows down their deployment?
