[justincormack]

Typical use of a "firewall" to guard what people think of as the external entry points and then leave nothing once you get in. Plus no auditing of permissions. Alas all too common.