Thanks, both of you. I wish I had references for this, but this is based on my experience as a professional teacher. I have 10+ years experience, starting with martial arts in high school, then running a dance studio, and now designing and teaching classes on software security. I'm sure I read some of these items somewhere, but I can't recall where anymore.