[Zope] possible security enhancement to CookieCutter product