Security System Myths: Three Common Misconceptions