If there was no user inconvenience, how could you tell those responsible for security are doing their job?