What users need is a simple way to secure their sensitive data, thus increasing the likelihood that they will actually comply.