If I'm managing Mac OS X faculty or staff computers with additional negative space, what additional negative space should I consider?

# Central location for apps and utilities shared across user accounts
d /Applications 0775 0 80 AAAAAAAAAAAAAP////8AAAA
AAAAAAAAAAAAAAAAAAAA=
d /Applications/Utilities 0775 0 80 AAAAAAAAAAAAAP////8AAAA
AAAAAAAAAAAAAAAAAAAA=
# Used by some applications for additional support files
d /Library/ApplicationSupport 0775 0 80 AAAAAAAAAAAAAP////8AAAA
AAAAAAAAAAAAAAAAAAAA=
d /Library/CFMSupport 0775 0 80
# Contextual menu items shared across user accounts
d /Library/ContextualMenuItems 0775 0 80
# Desktop pictures shared across user accounts
d /Library/DesktopPictures 0775 0 80
# Fonts shared across user accounts
d /Library/Fonts 0775 0 80
# Frameworks shared across user accounts
d /Library/Frameworks 0775 0 80
# PDF Services shared across user accounts
# This folder does not exist by default in Mac OS X
d /Library/PDFServices 0775 0 80
# Preference panes shared across user accounts
d /Library/PreferencePanes 0775 0 80
# Screen saver modules shared across user accounts
d /Library/ScreenSavers 0775 0 80
# Script Menu items (typically AppleScripts) shared across user accounts
d /Library/Scripts 0775 0 80
# Additional StartupItems for the computer
# StartupItems are run as root while the computer is booting up
# Be careful about putting this in negative space because it could be
# a source for attacks and privilege escalations
# You may want to create this folder and maintain its permissions
# to prevent others from adding in without permission
d /Library/StartupItems 0775 0 80
# User pictures for the loginwindow
d /Library/UserPictures 0775 0 80
# Apache's main Web documents folder for this host
d /Library/WebServer/Documents 0775 0 80
# iTunes plug-ins shared across user accounts
d /Library/iTunes/iTunesPlug-ins 0775 0 80
# If you allow users to install software through package management
# or by compiling it themselves, you may want to remove that
# from management
# However, consider compiling and/or installing it for them
# to prevent more negative space from opening up
# Software installed by DarwinPorts package management system
d /opt 0755 0 80
# Software installed by Fink package management system
d /sw 0755 0 80
# Software that has typically been compiled by the user
d /usr/local 0755 0 0.