Why do security agents follow orders? A theory of enforcement in hierarchical organizations