User Experience and Security Should be Complementary, Not Contradictory