Security as an art consists of two opposing skills, none of which can be
mastered without also mastering the other. On one hand, it's the skill of
restricting access, so that gaining illicit access is more expensive than
the value of having access. On the other hand, it's also the skill of
analyzing access restriction mechanisms, so that eventually circumvention
of the access restriction is cheaper than the value of having access.