What are the minimum security requirements for servers