I just wish I could tell you how many times I've seen a good security policy destroyed by an ID10T who would do something so simple as write his username and password on a sticky and tape it to his PC.