Design secure application tiers