What are the differences between server hardware hardening and application hardening? How does an application running on a server affect the system hardening plan?