We use AFSweb in a production environment. AFSweb is really meant to be used when you want a server where access to various pages is restricted. It's a much nicer alternative than IP restrictions. AFSweb with SSL will allow you to you AFS passwords for protection, and pts groups or entries [set with your standard "fs sa"] will protect directories as you see fit.