'Don't Ask, Don't Tell' Policy: Bad for Security?