The second instalment that was mentioned in this post, about reducing access to the SAS Management Console Authorization Manager plug-in as further protection for your ACTs, can now be seen at http://platformadmin.com/blogs/paul/2013/03/protecting-your-metadata-protections-part-2/