sshd: paranoid MACs
httpd: don't assume PHP or Python modules