Don, signed variables suffice to insure that the values are not corrupted by the client but anyone malicious could fairly easily forge signed variables, it just came up recently.