IT security rule #1: “Users must not try to circumvent IT security!”