>It's WA that has access to the list header.

WA does NOT have access to the list header. On unix this may be
the case because it is suid listserv due to various issues with web
servers executing scripts as 'nobody' and so on, but it is not part of
the design of WA and is not the case on other systems where it runs
as a normal non-privileged user.

  Eric