We will provide wrapper scripts to allow users to mount XRootDFS, similar to what is done on vm77.
Our wrapper script will only let users mount it for their own access.
Our documentation should explicitly prohibit users from mounting using user certificate for other people, such as a group machine. It will mentions that it is a security requirement, but is also a common sense (hopefully it will become common knowledge after documented it!)
vm77
.C.f. a related discussion: #22