IIRC kurono verified that these settings did not create security vulnerabilities
in practice, but I find it safer not to take any chances, and I prefer not
having to constantly reason about whether that remains safe enough.