How to secure our identity layers(AuthN & AuthZ)? Let alone the products.