Is blocking process spawning a recommended application hardening technique?