What a tech reviewer should and should not do, drawn from a bruising first experience on my Hardening Linux book