CentOS hardening script - aligned with CIS