How agencies can balance good customer experience with the need for lots of security