Value-based argumentation for designing and auditing security measures