Moving Beyond All-or-Nothing Security