Actually, a more canonical Perry policy would probably be to only allow code signed by Perry (or the security audit team) to be executed [trust only yourself] vs [trust nobody, not even your self] Simon