Have you considered allowing administrators to specify a username/password for PWB to use when writing to files like the history?
This would allow us to set read-only access (or no access) to all of the important files unless using the appropriate access. Then we just add a user to the domain with specific access to those files.
Of course there are ways to do it now using extra admin apps, but I thought it would be great to have it all bundled together for us security paranoid folks.
(Not that I think every flea-bitten member of the public is out to wreck our systems.)

Greg