If you ever (have to) ask yourself “When is the right time to address security issues?”, you’re already late to the party.