Please follow https://www.cisa.gov/blog/2021/06/24/bad-practices.