In those cases, access should be controlled but not restricted. We must not reintroduce the compartmentalization and strict need-to-know rules that were scuttled after the 2001 terrorist attacks.