When it's broken is the only time it might not be an active security threat