This feature is intended to help with drive-by security issues and general stability and resource consumption issues,
but cannot by itself mitigate all plugin security risks. As you can see there are a number of open questions there,
especially in terms of desirable behavior in each of the use cases. I'd like to discuss the pros and cons of each option
here, and then I'll update the feature page to reflect our discussions. Thanks!
“You must do the thing you think you cannot do” - Eleanor Roosevelt