Security by default