Employee education is key to ensuring citizen developers understand the basics of security without shutting down innovation.