locking down yml