Security Design: Stop Trying to Fix the User [www.schneier.com]
Yes this!