Finding a Middle Ground in the Privacy-Security Debate