How much security is too much security?