Add Debian secure defaults
Merge branch 'master' into next