Are Open Source and DevSecOps a Match for the DoD?