We've made it harder for an attacker to get through a passenger check-in. But what about insiders who already have permission to be there?