Security Paranoia

After reading through some of Mark Jaquith's security audits, I'm pretty
sure this is more correct.