Security models three truths and a lie