Honeytokens and fake credentials can raise the cost of an intrusion without a single new tool purchase.