Which is part of the design (see comments from the security architect elsewhere in the discussion).