Too late, I already have one.

Anybody have any pointers to a thorough security checklist/site for them?