According to the principles of security architecture in Secure Coding: Principles and Practices, which category includes the question $$Who are we willing to irritate or slow down with security measures, and to what degree?$$