[Zope] skinscript and URL traversal question