Security Enhancements

This was pushed on dev and looks OK. @jgmize r?
I believe this needs a `-s` between `nginx` and `reload`.