"Mutually Assured Destruction, MAD, works only as long as it works; it does not know what to do if deterrence fails, for it envisions no defensive capabilities. A deterrent works until it is needed; then one needs defenses."