>Some sysops would like to disable the saving of passwords as an >administrative option.
Sounds a bit like an Administration toolkit program would be useful here to specify which options the user is allowed to change/do etc like Microsoft's Internet Explorer Administration Kit. Maybe a bit complicated for short term, easier maybe to have an Administrator password which when set you need the password to make any change at all to the Setting and Preference files.