"Security-conscious system administrators will appreciate touches such as the fact that, aside from essential system daemons such as hald, initial services are confined to only xdm and cupsd." . . . .