How about a hook to allow CGI objects to insist on authenticated users
only? I think "authcgi" would be a good name. --Ethan
