Why security teams should treat machine learning like a junior employee