The 4 Key Capabilities for Effective Static Application Security Testing