An approach to modular and testable security models of real-world health-care applications