Did hackers nab RSA SecurID's secret sauce?