Lock down all unnecessary ports, and create IP security rules that allow internode and client communications.

Map JNA to a different executable directory before mounting the TMP directory with the noexe flag.