Secure by default