https://www.halfbrain.net/wordpress-admin-privilege-defense-checklist/