https://gnulinux.ro/blog-page-6385-hardenedbsd-v11000568-11-stable/blog/cat/9/qa