Which of the following approaches represents a valid means of utilizing generic security logic?

A: When required, generic security logic can be embedded within a service. The close proximity to the service logic maximizes the chances that the security logic will be consistently executed without interference from attackers. B: When required, generic security logic can be abstracted into a separate utility service. This allows for reuse. C: When required, generic security logic can be abstracted into a service agent. This allows for reuse and the security logic can be executed in response to runtime events. D: All of the above.