It is time to build security architecture that is designed to work -- not designed to look like it works.