What is a good example of a programming error that Bob can use to explain to the management how encryption will not address all their security concerns?