Lock down file permissions