Cracks in the security wall: unexpected lessons from researching the “field”