TheDoc has written a great article on
his blog about securing nats. Everyone who runs an affiliate program should take a look at this, as it covers not just NATS but everything from server security to php stuff.
http://thedocblog.com/securing-your-nats-data-146.html