There's some more stuff about using a MAC in the mod_perl book, but in general all of the security information in the CGI book applies directly to mod_perl.