3) Can you think of an secure, automated way of opening the display for root?

Whoops! I forgot to give a complete answer to this one.  Root should never open x-terms.  Open them as a regular user, then su to root.  Less convenient, but MUCH safer.

Cheers,

PES