https://jonathansblog.co.uk/best-practice-for-mac-security