In my experience, the surest way to security mess ups are when frustrated developers share credentials due to an overcomplicated sharing process of credentials.

In my experience, the surest way to security mess ups are when frustrated developers share credentials due to an overcomplicated sharing process of credentials. This obviously should not happen, but is why I am an advocate for 1Password.com. They've made it simple for admins and users alike.