Learn from my mistakes, tuning doesn't have to be awful
Separate the bad from the worse if you want to do SecOps right