HIPAA-friendly, fine-grained access control objects, and industry-standard password hashing helps to protect your practice from intrusion