Obscurity should always be part of security