@motion
disabling direct root login and adding the regular user is also a good security measure.