As security professionals, we tend to apply more and more controls until something is considered "secure enough." However, this can backfire. When we lose sight of usability, necessity becomes the mother of inventing new ways to bypass security controls put in place for our own protection. We'll work through some case studies of how (and why) end users have innovated their way around security, and propose a different approach to the security/user relationship. Also, kittens.