Indeed, the user is the hardest part of the program to secure.