Paper about how IT in healthcare in general and IT security in particular is done by people who don’t actually use it, listing different problems and workarounds that end up being used in the field. Sacrificing convenience for security leads you to having neither security nor convenience.