Ask HN: Where does sensitive data unexpectedly show up in production systems?