OK, Amos, this is what I've thought of: I'll install squid on the server. The 2 users can access the Apache front page ("It Works!") but not the Drupal directories as defined by the Apache httpd.conf aliases. If I set up the proxy to allow access from the 2 users (who will be on Dynamic IPs and accessing from the WAN), will that allow access to http://localhost/drupal/ ? I don't think I would need the proxy to cache anything, but I would like it to be as lightweight as possible. Does that sound like it would work?