What measures do you take to ensure that a self hosted script is fully protected such as a self hosted auto responder? How do you deal with scripts already containing vulnerabilities?