Towards a Security Benchmark for the Architectural Design of Microservice Applications