As a friendly reminder (in case you're considering it), do not revoke read access to the public on the main site. Doing so prevents users from accessing the registration page, which means they can't log in! And since you can't log in to fix it, you end up having to fix it in plsql. :P
