#RSAC: “Users Are Not Stupid, So Don't Treat Them Like They Are”