Does pkgsrc have a notion of a www user, i.e. the uid the web server on the machine is running under? I have a large scripting application (Koha, written in Perl) attaching to a database with the DB password stored in a configuration file. That file should probably be owned by the uid that the web server is running under.