Well there isn't a security issue becuase the webserver only has a subset of the data from the main server replicated to it. The main server is hit by the employees...