Stav dette: Composing and decomposing systems under security properties