There is no simple solution that works in all cases that I am aware of. This potential security problem (no worse than configuring your conf file with world read permission) has been documented for quite a long time in the manual.
We've added additional documentation to the scripts in question warning the user of security problems. No other changes planned. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]