profile: lock things down a bit