Patterns, learnings, and surprises with security signals