Set-and-forget WordPress security tips for a safer site