I’ve had a bit of comment spam lately, so I updated the configuration of Movable Type again, per Jacques Distler’s suggestion. I’d actually done some of the setup for this as part of the decruftification process, but omitted the step of making mt-comments.cgi (and mt-tb.cgi and mt-search.cgi, for good measure) inaccessible.