Disabling skins seems like a great idea as a server-side option ... but, as with minecraft clients, people will just come up with hacked clients so they can \"find the diamonds\" no matter what the server says. Probably the only way to make it really work is to have the server pull a hash code or something to validate a non-hacked client.