Start fast and strong as you implement default/deny