Always nice to see the OBSD team actually implementing protections and controls instead of relying on audits.