The priority around yesterday's PHP patches encouraged me to make some other hardening improvements. I rotated all my secrets, and have systems and processes in place now that I can do it again in a few minutes. Other things that was also on my todo list on this topic also got some attention.
commit 99b505b