passing blocks of memory around vs referencing filesystem/database, ACLs, authentication and SSL