Learning IT security in public — eJPT, CPTS, OSCP, and what actually happens along the way.