Limiting the attack surface