Security Design That Addresses Agency Conflicts And Information Asymmetry