** specific individuals, not to entire classes of people.
  */
  z = db_text(0, "SELECT group_concat(login,' AND ') FROM user"
                 " WHERE cap GLOB '*y*'"
                 "   AND login in ('anonymous','nobody','reader','developer')");
  if( z && z[0] ){
    @ <li><p>
    @ The "Write-Unver" privilege is granted to an entire of users
    @ The "Write-Unver" privilege is granted to an entire class of users
    @ (%h(z)).  Ideally, the Write-Unver privilege should only be
    @ granted to specific individuals, each of whom are highly trusted.
    @ granted to specific individuals.
  }

  /* Check to see if push-unversioned is granted to many people.
  */
  n = db_int(0,"SELECT count(*) FROM user WHERE cap GLOB '*y*'");
  if( n>3 ){
    @ <li><p>
    @ The "Write-Unver" privilege is granted to a large number of
    @ users (%d(n)).  Ideally, the Write-Unver privilege should only
    @ be granted to one or two specific individuals.
    @ The "Write-Unver" privilege is granted to %d(n) users.
    @ Ideally, the Write-Unver privilege should only
    @ be granted to one or two users.
  }

  /* Notify if REMOTE_USER or HTTP_AUTHENTICATION is used for login.
  */
  if( db_get_boolean("remote_user_ok", 0) ){
    @ <li><p>
    @ This repository trusts that the REMOTE_USER environment variable set