security review ate the whole sprint

We needed a small internal tool change and security review consumed nearly the entire sprint. Nobody objected to the design, but every answer created another questionnaire. I am not anti-security; I am anti-forms-that-do-not-remember-yesterday.