Usable security

A control people cannot realistically follow gets worked around, and the workaround becomes the real security posture.

This is not a concession to convenience. Unusable controls produce shared passwords, propped-open doors and shadow systems, all of which are worse than the moderate control somebody would have complied with. Usability determines whether a control exists in practice or only on paper.