This is complete security advice. Everything else is just implementation details.

Tagged: not wrong