Teaching Computer Security: Thoughts from the Field