Maintaining Security-Critical Project Where I Don't Read the Code