Like forgetting about disabling Meteor's 'autopublish' and 'insecure' packages that are enabled by default.