Well, the whole point of sieve, I believe, is to make it something that an admin would want to let arbitrary users modify on their own recognizance, and the ability to specify arbitrary programs to run would be just *asking* to be hacked.
Wouldn't a decent, secure alternative to procmail be sieve+amavisd-new?
-- Best regards, Charles
