Detailed discussions with HR around file and folder permissions, and file naming, leading to a Python script which does some fancy footwork to maintain a mirror folder on loi/www which mirrors all the wav files in oralhistory into mp3 files on the server; the latter controlled by .htaccess, the former by files system permissions. This is a bit ugly and not ideal -- lots of rsyncing going on, since I can't actually generate mp3s on the server -- but it works for now.