It's fine as an additional layer only when the primary layers do not rely on obscurity. I've seen too many instances where obscurity is used to justify weak pr

It's fine as an additional layer only when the primary layers do not rely on obscurity. I've seen too many instances where obscurity is used to justify weak primary layers (IE it's fine we're using this single word shared password since we have all these other layers). It can often provide a false sense of security since it looks like a security layer when in reality it often turns out to simply be a minor inconvenience to an experienced attacker.