that reminds me- is there any way (easyish) to block execution of unsigned binaries, or alter the environment (automatically) when they are run (eg. execute...