The microfoundations of security and implications for governance