Yes, remember - it's good to block attacks from the outside, but only if your own users won't attack you from the inside. Keep root stuff to root, trust no-one!

Jeff