i have set up rsa auth systems. would it surprise anyone to know that sometimes vulnerabilities are purposefully included because its easier or allows you to keep some old insecure app working? securid is not some golden impermeable shield. it just helps stop a few attack vectors.