advice on webmail/fnord chroot setup

Hi there

Have been using thttpd for some time now, but require SSL/TLS support so 
am revisiting fnord after briefly trying it out over a year ago.  The 
requirements are complex and as such I'd appreciate any advice and/or 
pointers in order to setup the following. Obviously the fact that fnord 
runs chrooted is where the complexity begins. This setup is for a 
customised virtual qmail/webmail/fnord installation.  Please let me know 
if the list has an archive anywhere. Many of these issues are more 
chroot related, but the fact that I'm porting the setup to fnord 
warrants (I think) a post here... send me on my way if you think 
otherwise ;-)

Requirements:

- CGI (with persistent perl/speedy cgi)
- Customised virtual qmail (single uid/gid setup)
- Webmail accesses virtual IMAPdir store (Bincimap) directly
  (like sqwebmail / o-mail webmail)
- DSPAM

The issues arise when referencing binaries such as qmail-inject (might 
have to use SMTP instead) and DSPAM utilities from the webmail cgi.

I've started my chroot journey here:
http://www.nuclearelephant.com/papers/chroot.html

I'm also considering gatling, though it appears that gatling proxies CGI 
requests (passing to fnord), so I'm not sure which route to go, given 
that there's a mix of CGI and static file (mail messages) delivery. 
Would the gatling/fnord mix yield a better performing system for this 
scenario (proxy+additional TCP overhead)?

Thanks
Dale