Nice. If you do the opposite of what WordPress does for security you're probably on the right track.