I'm fond of saying "Everything is easy, when you know how to do it", but getting these security details absolutely right isn't entry-level.