The token/alias methods mentioned above are probably the best way to go, but I gotta ask:

You're using taint checking, right?
That's because you've read perlsec, right? ;}

It may seem obvious, but since -T wasn't mentioned, I just wanted to make sure.