consider allowing each campaign to set it's own thresholds
pros:
- each campaign can set it's own desired security level
cons:
- certain campaigns with lower thresholds might expose themselves to attacks without end-users knowing this; could be mitigated using global minimums