> One way of achieving the user-unconfigurability would be to rebuild the > xscreensaver package with a patch that removed the code that read > ~/.xscreensaver. Long-winded but it would work. At the moment, this feels "right," but also a little over our heads. A frequent cron job that replaces .xscreensaver with our default does not sound so bad, in comparison. But maybe this is an excuse to look at some code and see if I can figure it out (not generally my strong suit :-)). Thanks to everyone for participating!