Checklist of vital steps for turning on security

Address issue #1039.