Add basic security measures (not run as root)