Security watch lists growing too large?