Add commented out rules to disable unused IM protocols for the truly paranoiac
Remove unneeded access to cat
Allow access to hosts.{allow,deny} for tcpwrapper integration and allow read access to /var/lib/apt-cacher-ng/** since some config symlinks point there