How do you balance speed and security at a startup that needs to move fast without creating future headaches?