It seems like there are two aspects to the proposed scenario when there might not need be. The fact that a web based list is always up to date, and the idea th

It seems like there are two aspects to the proposed scenario when there might not need be. The fact that a web based list is always up to date, and the idea that it is publicly readable. These obviously do not go hand in hand, so it seems like a good medium would be controlling access to the digitally managed list. To answer the question of public ACLs, it really just depends on the situation. In a purely physical setting, it may not be as big of an issue, although it does open the possibility for impersonation and forgery. In a digital setting, it can be a very bad idea in cases where brute forcing and the like are a possibility. Also, not terribly important, but on the last point regarding physically accessible servers: They are never really secure.