Just for show: 11 theatrical security measures that don't make your systems safer