Applying human-in-the-loop principles creates application security controls loved by developers. See how.