Security Ergonomics by Design