Validator security

How a validator operator puts the validator behind sentry nodes, locks down each host's ports, and keeps the three keys where a compromise costs the least.