Random encrypting swap is also nice: https://wiki.archlinux.org/index.php...wap_encryption