Incorporating Security into Platform Engineering: The Dos and Dont’s