PHP Scripts And Nobody Senders

I have a user that wants to run a script that uses nobody as a sender. On the box it is disallowed to have nobody send emails in WHM, however, I have found that some are changing the setting in WHM to allow for nobody senders as long as phpsuexec is running, however, I'd like some feedback from the group.

1. Regardless of phpsuexec, is it more secure to require ALL php scripts to use smtp auth instead of any other workarounds for those scripts which use the webserver nobody as a sender?

2. How is everyone else handling this issue...