There are two types of security professionals, those who build the buttons and those who click them