https://www.boettjer.org/weblog/2006/01/30/20-ways-to-secure-your-apache-configuration/