Add additional OS hardening