We learned it the hard way...
...so why don't you use our example and make a shortcut?
Sorry but security is no fun at all. In fact it seems to become even more critical than it had been in the past. The whole industry likes to dream the web 2.0 dream but - sorry - do you really think that the consumer will accept the idea of web 2.0 unless they trust the underlying technologies??
Ups, sorry, I repeat myself...