Closing the Gap Between Application Security and Observability