Automation improving, but security needs to find ways to slide into DevOps workflow and toolchain.