The optimal settings are configured by default. However, users are free to make changes as necessary.
Please consult a web developer or security professional before making advanced changes to your settings. This could result in admin lockouts and degraded performance.