Tips
Limit each connection to the permissions required for its bounded task.
Read Privacy and labelling in everyday work
Read Put a lock on it: securing a self-hosted stack