You can't make people more secure by making them less secure