For a semester exam, which option is correct about fail secure?

A. printing secrets on errors B. ignoring all exceptions C. granting access when validation fails D. ensuring failures leave the system in a safe state