https://also.kottke.org/04/07/a-windows-security-checklist