It's time to rethink the way we design security for the Internet of Things and put some consequences behind those that don't follow the rules, according to a security consultant.