honesty isn't the most secure policy

found on the secure state blog

i wonder. do you think people trying to get in illegitimately would ever be honest about not knowing the password?