[Zope] maintaining consistent security settings across cloned sites

[Dennis Allison]

I'm looking for a tool that will help maintain security settings, having
been burned a couple of times.  What I need is:

1. A tool to traverse a site and build a database of security settings 
that must be set for each of the various roles.  Ideally this would 
remove redundancies and, perhaps, raise warnings when settings look 
strange.

2. A tool to apply said database to a site which is similar but, perhaps, 
not identical in structure--that is, some extra folders(and enclosed
material) might appear in one site and not in another.

3. It would be nice if the security settings database could be read and
edited off-line so they could be reviewed and corrected as a unit.

4. It has to be able to handle proxies.

5. It has to be able to handle roles beyond the usual Anonymous,
Authorized, Manager, and Owner.  It's OK to demand that both sites have
the same user defined roles.

Anyone done anything like this?