For Good Measure: Security Measurement in the Present Tense