Tips on Migration to a Default-Deny Linux System