The product uses security features in a way that prevents the
					product's administrator from tailoring security settings to reflect the
					environment in which the product is being used. This introduces resultant
					weaknesses or prevents it from operating at a level of security that is desired
					by the administrator.If the product's administrator does not have the ability to manage
						security-related decisions at all times, then protecting the product from
						outside threats - including the product's developer - can become impossible.
						For example, a hard-coded account name and password cannot be changed by the
						administrator, thus exposing that product to attacks that the administrator
						can not prevent.