Which of your security layers isn't a trade-off?