Thanks, I am sure that this approach would work, but I am a little reluctant due to the race conditions, security considerations and extra code. The "ssh/find/cpio/bzip2" approach is simple, and the only drawback is not telling the user that they've failed to get the right dir/file is probably acceptable - it just doesn't give that satisfaction of doing a good job.