Can security be legislated?