If you use EPAL to elevate just the application's perms, you need not worry about users mucking in the share since the user would not have access, only the application would.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
