One thing you want to really be careful about is if they have access to the code then they will likely start making changes to it. What invariably happens then is that you will never be able to get them to upgrade to a newer version. With that in mind, I like bastard's suggestion of selling them an appliance (in Re: Offering a locally hosted solution?).