Probably more the M than the S in SMB.

I'm fond of saying "Everything is easy, when you know how to do it", but getting these security details absolutely right isn't entry-level.