sure that the permissions are as restrictive as possible [R.798.1].
In Windows environments, the Encrypted File System (EFS) may provide some
protection.
For inbound authentication: Rather than hard-code a default username and password,