Just a thought, but couldn't you theoretically whip up a fuse-based file-system that 'mirrors' the actual file-system but contains none of the actual data, just the structure, and then give the statisticians access only to that mounted file-system?