> My problem with the paranoid approach here is that I have to log in
> as root regular on any machine that is being monitored by the
> daily and security scripts.

I have aliased root to someone else, so I never have to log on as root
to read the mail.  I also use .forward to get mail from different
systems to one system.

  -jm