NESA compliance VPS hardening