When a lie is not a lie but a legitimate security measure?