Security defaults

https://github.com/mathiasbynens/dotfiles/pull/306