I also think the same, I want metal self-hosted, anyone have tips how to do the security too?