What does GitHub's security team even do?