See comments in `tasks/settings.yml` Ideal implementation: Provide pre-configured configuration files and a cli flag for choosing particular ones based on hardening level.