You could always put that particular server in the DMZ and require authentication for the casper share. I wouldnt put anything sensitive on it being in the DMZ, but packages and scripts should be fine. As long as you route things properly through your firewall, there shouldnt be any issue with mounting the casper share on an external device. Alternatively, HTTP downloads can be used and still be password protected. Again, it all comes down to your firewall.
