Designing a solid security interface, like most things, is more of a human problem than a technical one.