Add server hardening steps