Andrew,
Thanks. If #2 is possible, then I think #1 should also be possible or at least desirable with anonymous access disabled. That is, no matter how someone accesses one of my maps, if I've configured custom locators they should be available to all viewers no matter how they access a map. That would be preferred behavior to me.
Marc