I understand the issues from a programmer's perspective regarding Perl module installation, but what about from a security perspective? It seems that CM is decidedly lackin, and one would run the risk of pushing things into production that use uncleared packages, or worse, packages that definitely open security holes. I'd appreciate getting some feedback.