My developers are asking me to turn on CGI under Tomcat in order to enable certain call-backs from the client to the server. Is there any reason why this shouldn't be done? Any gotchas I need to be aware of?