As it is OpenACS templates reside in the www space and can thus be directly requested by clients. Moving them into the package lib directory would solve that.

Especially if the master tag would check the package lib by default followed by the sub-site lib and global server root lib. For backwards compatability the last place to be checked would be the current location of the global default-master in <server root>/www.

/Bart