Thanks for all the help so far guys... here's where we're at...
Running metacity fixed the keyboard issue with Mozilla/firefox, so that's all good. That simple script drag posted also works fine for respawning the browser if the user ends up finding some way to close it. Cool.
Here's the rest of my 'to-do' list... I'm going to be looking into all these, so don't think I'm just wanting you guys to do all the work. I just figured I'd post what I want to get done in case any of you has suggestions that I don't end up finding on my own.
- Mozilla/FireFox fullscreen kiosk-type mode on startup (might have found an answer for this, going to try it next)
- Find/write a script to re-initiailze the browser after being idle for a specified ammount of time (5 minutes or so)... what would also be nice with this is an option to lock this system from re-initializing if we need to. Example - say an applicant gets halfway through applying but needs to go look up some information or, has to hit the can... maybe have them be able to lock the station for a limited ammount of time... it'd be cool to have it require an admin to supply a password to unlock it, so that people didn't abuse this. But the whole lock thing would just be icing on the cake... the re-initialize script is most important.
- I need to set up whatever browser we're using to have the same settings on all workstations... a global profile I guess... so that all workstations have the same homepage, settings, features enabled/disabled, and so that if we add new stations we won't need to do much configuring. As is, each workstation logs on as ws001, ws002, etc., and at this point in testing the setup the first time each particular user runs the browser, it starts up as a normal, windowed browser. I'd like them to start up with the same homepage in a kiosk-type mode, which might be solved by the first thing I mentioned... we'll see how it works. Anyway, being able to change the default browser environment would be a nice thing to have, which I'm sure can be done... just haven't gone out to find how yet.
I think that's about it at this point... pretty darn close to having this system ready for production. Next project after this is figuring out how to set something like this up for people who need to run windows software... I know I can do rdesktop sessions with ltsp, but haven't gotten it working yet. Linux is so freakin' cool, heh

... a year ago I wouldn't have even known half of this stuff was possible.