pre and post deploy hooks, tighter process security, supervisord support