security hardening v2 -- preserving (some) os and io functionality