We put a gratuitous cgi-bin in the urls to throw off potential competitors, so they wouldn't guess how our software worked. Not sure if any were even sophisticated enough to wonder about that, in retrospect.
Would you recommend a similar tactic now?
yah dude, put .asp or make it look like a java based server. Even .php would probably work nicely that way.