When Information Improves Information Security