[steveklabnik]

Seems reasonable. How did they not 'act accordingly' in this case? What should be different about the security process currently in place?