Is the definition of a secure system, that it is still secure even if you have the source code?