admin config hardening: PASS