Because there is rate limiting built in with nginx, and csf come pre installed with centminmod, should i still use WAF plugin for wordpress? Or i only needed sucuri security plugin for file audit and malware scan that come installed with centmin 22...