How about a hook to allow CGI objects to insist on authenticated users 
only? I think "authcgi" would be a good name. --Ethan