Make secure. Drop insecure, add ACLs, check users