A security framework originally published by the US National Security Agency has begun to rack up an impressive list of protections agains security holes.