https://tongfamily.com/2013/12/01/when-is-better-wp-security-too-good/