I'm aware that if someone REALLY wants to overcome these restrictions, he may do it through literaly thousands of ways.
As a matter of fact I've done it a couple of times (yes, with LWP :-)
I was actually talking about the "average" site user (if such a thing exists...).
By the way, thanks for the .htacess solution, it's much cleaner.