The possibility of intentional contamination needs to be an integral consideration in safety planning, and measures to prevent sabotage should augment, not replace, other activities.