Sorry for the slow responce. I just don't check this forum often.
I do not have a security script myself. And posting such scripts publicly is often a bad idea. The making the script public just gives the people trying to crack it a running start.
I would sugest starting by setting the ini setting.
Account validation required during Master Server down times=1
And then seeing if you can join the server admin group that
TSMDude put together. You may need a server Up an running to join the group however.