Security HardeningNE503 production security baseline: credentials, network exposure, tokens, and app permissions.