Actually, there is an acs-kernel parameter which is supposed to control the request processor debugging. I'm not sure what debug parameter in the nsd.tcl file does. Neither one turns off any debugging :) Maybe we need to have more parameters for the QD and the security tokens. Any suggestions?