Just an idea, the config_mp.cfg might be exploitable also, since it's saved and loaded at every map change (disallow writing to the file, so its not changed at runtime)

Code:
// generated by Call of Duty, do not modify
unbindall
unbindall
bind ESCAPE "togglemenu"
bind SPACE "+melee_breath"
bind 1 "openscriptmenu command weapon_american"
bind 2 "openscriptmenu command weapon_british"
bind 3 "openScriptMenu keysMenu key3"
seta fx_sort "1"
seta g_allowvote "1"
seta g_antilag "1"
seta g_banIPs ""
seta g_clonePlayerMaxVelocity "80"
seta g_deadChat "0"