How to Fight Security Tool Sprawl with ASPM Extensibility