samba: secure your home shares

Usually I add the following two options for home share on a samba server, to tighten up the security:

[homes]
...
    valid users = %S
    path = /home/%S

The first option is to set, say user1, to only see his own home directory as the home share (he can see other public shares as well), not to see the home directory of user2.

The second option limits that the home directory of, say user1, as the share, must be /home/user1. For example, usually root’s home directory on many linux distros is /root, therefore it can not be accessed as the samba home share.