[Zope] installation security best practice question