Also mask newer header versions.
Drop 1.0 profile
Switch to hardened profile as it is the default for all our other systems.