Embracing and Securing Infrastructure as Code