Ultimately, all security is by obscurity or delay by physical impediment. Kerckhoff's doctrine is just an abstraction in a limited context. Throw in all complications of the real world, and your left with just those two.