https://kottke.org/04/07/a-windows-security-checklist