Which statements about securing confidential information are correct? (Choose three.)

A. When writing to System.out, you should not include sensitive information.

B. When reading sensitive data from a Console, you should use readLine().

C. When throwing an exception, it is acceptable to include sensitive information in the message.

D. A String is not a good object type for sensitive data.

E. A Java policy should only grant the permission lock to prevent a user from modifying the file.

F. A Java policy should only grant the permission read to prevent a user from modifying the file.