>descriptors or something or somehow enforce access rights so that in
>the glorious future venus can be 'nobody'.

I think the idea of running as a user other than root is good, but
having venus run as 'nobody' would make the venus file cache visible
to any other process running as 'nobody'.  I don't think that would
be very nice!

--Phil

-- 
Phil Nelson                       NetBSD: http://www.netbsd.org
e-mail: phil@cs.wwu.edu           Coda: http://www.coda.cs.cmu.edu
http://cs.wwu.edu/faculty/nelson