The x11forwarding and pam branches are now merged into trunk. While being fairly big hunks of code, they are pretty safe. x11forwarding doesn't do anything unless the user passes -X to qsub, and the pam module doesn't build by default.