How do application security testing tools fit into a daily developer workflow without slowing everything down?