This patch shouldn't go in as is.  It should _definitely_ check the
``secure'' variable before allowing writes of this nature.  There's
been discussion about this before.