To be Effective, Security Must be Simple, Open, and Automated