Security of client-side scripts

[Peter]

I've attached an example of an obfuscated .lua file to this post. If we use something like this (with an automatic obfuscator which I will write) it won't be too hard to produce some security. The player-serial seems somewhat odd to me: it's quite obvious that the player is playing on the server if he's running the script.

Something like an activate command seems like a better option to me, just don't do anything at all until we get properly activated.