3 Security Lessons We Learned the Hard Way in 2017