Thanks very much Andy, Paul and Steve. You've given me a lot to think about.

For the record, the reason I hadn't thought of actually "trusting" the sysadmin (must be a...