> Systems need to be secure by default. > They need to remain secure against accidental changes. > Turning on "serve pages" does not provide ample warning of the risk.
and that's the problem I encountered. (albeit not a direct security related problem) kev
