Securing Internet-Critical Software: How We Could Have Backdoored Bash