<A target="_blank" href="http://www.andypedisich.com/blogs/andysblog.nsf/dx/groups-dont-work-as-expected-in-execution-control-lists.htm">Andy Pedisich has seen Execution Control Lists mis-configured, frequently.</A> So he's posted a couple of warnings.