Disallow access to /css and /js (closes #23 and #24); change ServerAdmin to hostmaster
Disable DEFLATE compression (closes #27)
Limit ssh access (closes #28)