Developers worry about security, still half of teams lack an expert