https://clevershark.com/2006/04/security-myths-and-passwords/
Sometimes more security = less security.