This is a classic case of "Security is a state of mind, not a product." We can mandate the existence of all sorts of products and features. Until we have people capable and willing to using them properly, nobody will be secure. Jake Brodsky