All of the security plans assume that the bad guys know far more than you could learn on a public tour.