Best Practices for Securing DevOps