Any ideas/thoughts on what the perfect Node.js security layer should look like? Real-time protection against the zero days, OWASP top 10? Shall it be per-server/per-user/per-app configurable? npm malware scanning? What else?