There's no magic pill for security