We should add a go-live security checklist to our documentation, which goes into further detail than the installation doc pages can do. Purpose: Avoid common mistakes that can leave a site more or less open to attack.