* if(allowed(user)) and req_access/req_one_access should handle ID concerns
* Adjacent() should determine whether the mob is within reach, and not behind glass etc
* Fingerprints should always be added.  Other mobs should add hiddenprints (particularly AIs, robots, ghosts).
* Human-only should be fine.

I'll let you wrap up this todo list before I merge.