Hackers in your network? Why kicking them out straight away is not always the best approach