Thanks for your good words.

I suggest looking at implementing mod-security on the server. There are some rules for pl stuff here.

Seems to me that's exactly what the new security mantra of "least privilege" is meant to do. Should actually be called the principal of least trust, as it's not isolated to information technology security. You can see it in the entire corporate "culture" nowadays. You start by assuming every potential employee is a crack head. You then treat them as if they were thieves and spy on their daily activities, even going so far as to put cameras in bathrooms. And lastly you assume all ex-employees want to burn the building down before escorting them off the premises with 10 minutes notice.

The result has been more disgruntled people and the need for more security. It's a self-fulfilling prophecy.

Here's a radical idea: try treating people with dignity and respect, maybe then you won't need so much security.