After a bit of conversation on the mailing list regarding xmlrpc4r, I convinced Michael Neumann (the author) to add a method that let's you do IP validation before accepting a client request.
server = XMLRPC::Server.new(8888)
server.set_valid_ip("191.11.11.1","191.11.11.2")
...
This may not be the end all of security, but it's certainly a big road block, and it's enough for our own needs. I looked at Frontier and XML-RPC, but I couldn't determine if they had anything similar. Anyone know?