I don't see the problem, surely no curious 12yr old would possibly figure that out.
Wait, I seem to recall picking my first lock with a paper clip around 9, there might be a problem there.
A third party security audit is the IT equivalent of a colonoscopy. It's long, intrusive, very uncomfortable, and when it's done, you'll have seen things you really didn't want to see, and you'll never forget that you've had one.
Comment