NS8 security hardening

Nice idea! Please do not forget the links to existing discussions around this topic, to avoid repetitions, for example