split bootstrap (bootstrap, user settings, lock with fail2ban and remove root)