Banks are hiring security consultants to test the safety of their deposits. But often, it's still too easy to steal.