Actually speaking of CWD... why don't you output the data to the .ioftpd.message file? One nice feature coming in v8 is the ability for the user to decide whether they want to see that file when they CWD. That means it's up to each user and I'm guessing bots will NOT want that
The .ioftpd.cwd file which processes cookie/scripts (.message doesn't) is still shown no matter what so things like the requests dir can do stuff if scripters want no matter what the user's settings are.