Andrew ... I think you still have to ask the APM to run the upgrade even though it handles parameter changes itself without an explicit upgrade script, right? (just trying to clarify)
I think this feature should off by default, like Andrew, is there any reason it shouldn't be? Anyone smart enough to set up Pound can figure out how to set an OpenACS parameter.
And even if not strictly necessary, won't the ability to add a fixed IP (or list of IPs) from which such requests will be honored lead to better peace of mind for admins?
Obviously I approve of adding this feature just want to make sure we get it right (even if that means you guys prove me wrong).
