What the TSA Can Teach Us About Protocol Design