Use a security token. If you don't, you only have yourself to blame if this stuff happens.