Security review

Consider whether we should be logging in not as root and using sudo/su when necessary. Consider whether having files within the /var/www/html tree with root:root permissions is a potential hazard.