https://blog.kalrong.net/en/2016/12/05/basic-hardening-guide-for-debian/