Enough security theatre, it's time for security opera