## In Scope - Still needs investigation, but reduce permissions on custom node processes. - Chroot to fully lock them down - Reduce web access (unless they specify needing web permissions) - Reduce filesystem access - Probably Linux-only - Should include WSL if possible.