Don't discount physical security