Is Microsoft database security an oxymoron?