A starting point for secure UI and UX? Remember that security measures should frustrate attackers, not users.