Mike,
Forgive my naivety, but JPA can only be accessed by someone on the DII or RLI; ie closed netwoks so there is a measure of security already - added to the fact that even authorised users can not gain access so we have total security!!
On a different note, the system is so effective Innsworth can post someone and both the individual and post can disappear in a matter of seconds. Really makes you feel safe doesn't it!!!
By the way, what's this about pass holders? Sorry to seem dense but I've only just found this site and haven't worked my way through all of the articles posted.