Security, Authentication, and Authorization security access audits principle of least privilege authentication by third parties (Auth0, ORCiD) the addition of new resources includes a security scan