use XZ compression
protect log dir
security