Security should be invisible. I remove complexity, enforce one owner, one process and let people feel safe without thinking twice.