added basic security hardening to setup script