'My shared pathway': the experience of users of a low secure service