> For example, with most webservers you can pretty safely restrict access to a file by giving it a filename containing some key that cannot realistically be gue

> For example, with most webservers you can pretty safely restrict access to a file by giving it a filename containing some key that cannot realistically be guessed. What I dislike most about that is that it's using traditionally non-key material as the key. Systems you're interacting with will probably treat that non-key material as not-a-key.