Setup a runtime level CallFilter and filter any privileged calls or any calls that we do not require at the time of launch, the goal is to reduce the attack vectors by limiting the extrinsic with public calls.
Example : https://github.com/Manta-Network/Manta/blob/e519fb9a137c161cd18d7e477f17fcea6d609ff0/runtime/manta/src/lib.rs#L194