In-Q-Tel chief: IT security policies have become self-defeating