> Note that this level of security breaks down if the web
> server is compromised, or if root user is compromised,
> or if another CGI on the box is compromised.

If root user is compromised, what's left there not breaking down?
pelagic