> You're right, this perhaps is out of scope of spec, but I think it's > as important as specs. Maybe we should create some page (wiki?) with > "good practices" of ensuring security of OP? That's a great idea. - Scott