For complete over-engineering please also add: automated CI/CD, secret store (with rotation!!) & SOC2 audit.