The Cypher Suite

If you're not storing customer data, then maybe that's not as important to you. But if you've got a secure setup, then it's a real beast to maintain. All your services should be talking over encryption, over encrypted channels. And even with the services communicating to each other, you should be rolling those keys and whatnot.