Sometimes, faced with an apparently intractable problem in security,people say 'I know, we'll leave it up to the users to decide what todo'. What they really mean is 'we don't know what the right thing to dois, so we're going to make the users figure it out'. As the saying goes,now they have two problems.

Let's look at some big reasons that this is a terrible idea, both ingeneral and specifically for security systems