added hardening checklist