What to learn from Sony’s security breach