A Facebook engineer asked if it would be OK to take a look at Paavo Siljamäki's profile. Sure, he said. Then he wondered: how many employees can get in without credentials?