A virtual-reality analysis mission exposes a employee-security paradox.