We won't drop the security, we feel it's the right thing to do.<<< >>>Thanks for posting your opinions, they really do matter to us.<<< Your final comment is contradicted by your first comment. Your decision was made before you ever came to your customers and asked for their comments and input. That, to me, makes it clear that our opinions do NOT really matter. Sorry, I know that sounds harsh, but right at the moment that is how I feel. I would be curious to know what security consulting firm you hired before you decided on this adventure. Whoever they are, they are out of touch with reality. Your system will be breached, cracked and posted easily within 30 days of initial release. There are at least three cracker groups that will declare it a "holy war" to crack the system. And all three will succeed. It will be a race among the three of them to see who does it first. Ask your security consultant if they know the names of these groups. If they don't, they have no business passing themselves off as "security consultants." If they do and they still advised you to go this route, then I would wager they own stock in the company that created the system you are implementing. Or did you make the mistake of going to a company that also sells security programs or systems?