An Empty Post at the Gate: Why Guaranteed Cover Matters in Site Security