piwik hardening more accurately
elms media doesn't need this