Restrict it to people you've met or spoken to enough to think you know them.. ^^^^^ That is the problem. Password access to a members-only looking glass can prevent temptation and grief. And nobody needs shell access per se because we are talking about people who have root on their own servers.

Some people have done a lot of work on locking down the original looking-glass script. Is there a version of this that is generally accepted to be the best? How useful would it be to folks to have access to a set of looking glasses that have a few more options than the classic one, i.e. TCP traceroute, PathChirp one-way latency measurements, etc.? --Michael Dillon