The dangerous login may have the right password. Gurucul has built a business around what happens next - and why a security team should care.