Mind you, that locks everybody out.

Which is the only secure way to do it.

For what you want, you *could* use XML to present a web interface without buttons as the default stylesheet, and then have a separate set of XML with an unpublished URL that *you* use for the broadcasts.

Security by Obscurity..

Cheers