some nice bits and bobs there, glad youve taken my suggestions on board,
two points i would make though,
#4 if you go ahead with this, FOR THE LOVE OF GOD, please have this enabled as default in the new ini, i dont need the headache of 50 people asking why iosfv doesnt work no more
#13 (unlucky for some) is that even needed? as gadduser already adds a user to a group ie. site gadduser group user password ident@ip etc.