Security through obscurity is not bad