Maintaining Security While Scaling Citizen Development Platforms