Fear drives irrational security decisions