pre and post deploy hooks, tighter process security