binford2k[away], this "someone makes an accoutn saz or puppetlabs and wreaks havoc" - I have been saying since xz-utils we a virtual identity with web of trust or any code must be seen as evil until proven not evil.