my employer/client (Dutch government) is taking the same approach. I don't like it, especially because they are the government. They should be a little bit more paranoid about these things.