hardening just the binaries that are there for our install