- no password logins - no root logins - key-based logins only - allow x11 forwarding - allow agent forwarding que mas?