The basics go a long way: two factor auth and privilege minimization.