Can the configuration of static analyses make resolving security vulnerabilities more effective? - A user study.