Why "Directory service could be modified to enable a MITM attack?" is "no" for all and marked as negative?