Except that I want access to use HTTP Authentication ... but since $SERVER['HTTP_AUTH_USER'] and $SERVER['HTTP_AUTH_PW'] aren't available under CGI, I want direct access to the headers so that I can do it myself: that is, I want the raw headers; specifically, the Authorization header.
[rant]The more I think about it, the more I am starting to feel that this particular design choice is more "MSish" ("We know what's best for you."), than "OSSish" ("You are free to do what you like, but it's on your head if you get screwed"). [/rant]