To catch a terrorist: Why extreme vetting may be an outdated solution