Dave,
Check out this thread. It is a really long read, but some of the security stuff is discussed in there.